We have seen a number of people fall victim to a Facebook messenger scam in recent days.
It appears fraudsters are taking over users accounts and then sending the users friends a request for money to help pay a bill via Facebook messenger. The victims have then been making the payments to the fraudsters believing they are helping a friend.
If you receive a similar message we would suggest you contact the person directly and confirm if it is authentic.
FINANCIAL CRIME ALERT
As a result of scam, a 66-year-old man lost £3,000 to fraud and attempted to pay the fraudsters a further £7,000 yesterday after being told he would receive a large amount of money from overseas if he paid the 'tax bill'. Thankfully his bank stopped the second transaction.
Fraudsters claiming you will receive a large sum of money after you pay them a smaller amount is one of the oldest scams, don't fall for it. Start the conversation with your friends and family so they know its a SCAM.
Criminals may cold call you claiming there are problems with your computer or broadband and they can help you solve them. They often use the names of well-known companies, such as Microsoft, Apple or a broadband provider to sound more legitimate before attempting to take over your computer.
The criminals will ask you to complete a number of actions on your computer, they may even be able to demonstrate an ‘error’. They may instruct you to download a ‘remote access tool’. This gives the criminal access to everything on your computer. They can access and copy your data or download malware onto your computer to monitor what you do in the future. Fraudsters can even access your online banking and transfer money out of your account.
You may also be asked to pay for this ‘assistance’ you have been given. This could be a one off payment or an ongoing direct debit over many months/years. If you do provide payment details they could be used to commit further fraud against you.
How to protect yourself
A genuine computer service company will never call you out of the blue regarding issues with your computer. If you receive a call like this hang up straight away.
Never allow anyone to remotely access to your computer.
If you are having issues with your computer, contact the retailer you purchased it from regarding service or repair. If you are having issues with your internet speeds, contact your service provider for advice and support.
It is reported that there has been a noticeable increase in vishing frauds against the elderly. Below is a list of recent vishing fraud incidents in Scotland.
1. The victim is contacted by landline or mobile knowing basic details about who they are and who they bank with. The fraudster uses spoofing so the caller phone number matches numbers used by the banks. The fraudster introduces themselves as an employee of the bank and claim there has been suspicious expenditure on their accounts. They convince the victim that they must move their money to ‘safe accounts’ set up for them. The victim thereafter logs into their online banking and transfers all their money into their own current account. From there they are provided with a list of mule accounts and instructed to send the funds to these accounts. Fraudster states the victim will receive new bank cards in the post.
2. Contact with victim as above. Fraudster then states that bank staff in the victim’s local branch are responsible for intercepting people’s money and stealing it. To catch them the fraudster requires the victim to attend the local branch and make transfers to ‘safe accounts’. By doing so they claim they will see the flow of the funds and be able to identify which staff member is responsible. The victim is schooled in how to answer any questions if challenged by bank staff. The following have been used recently:
They are sorting out their financial affairs
The money is for their Grandchildren
The money is for building contractors
It is reinforced that they must not trust anyone in the branch. Fraudsters also warn victims that it is a criminal offence to tell anyone about the contents of the phone calls.
The victim is also told to describe what they are wearing as the fraudster will be monitoring live CCTV footage of within the branch. On occasions they have been told to keep an open line on their mobile phone so the fraudster can monitor what is being said.
Victims have also been told they will receive a four figure sum for assisting with this investigation. On several occasions they have then followed up with calls pretending to be Police Officers. They have used the genuine name of a financial investigator within the police (who has previously made various media releases available on open source).
The successful levels of social engineering can be demonstrated in the following two very recent examples:
A recent vishing fraud resulted in an elderly female attending at a local Bank on three occasions in one afternoon. On each occasion the fraudster even insisted she took taxis and not the bus. In total £36,000 was transferred over the three visits. The victim was only challenged once but provided the answer that the money was for her Grandchildren. The victim thereafter believed a fictitious Police Officer would be attending to take a statement causing a delay in any reporting.
An elderly male was victim of social engineering over a three week period from fraudsters purporting to be from a specific Bank and the FCA. This resulted in him cashing out his investments into Bank accounts. Thereafter he was instructed to attend another Bank branch which wasn’t his local branch. The male was specifically told to go to this other branch with the reason being that Bank staff in his local branch rotate the branches they work in. The male made an international transfer to Dubai of £600,500. He was schooled to lie to Bank staff if he had been challenged.
3. The victim receives a text message on their smart phone claiming to be from PayPal stating their account has been compromised and they have 36 hours to login and fix this. There is a fraudulent internet link on the text message. Victim clicks this link and is taken to a fake PayPal page where they ultimately unwittingly provide the fraudsters with their PayPal details.
The victim is later called using spoofing technology. The fraudster claims to be from a Fraud Team of their bank and question fictitious spending at Argos (or similar). The fraudster thereafter states the victim’s account has been compromised via PayPal and they must move their money to a safe account. The victim thereafter is talked through how to do this via online banking. At this stage, the fraudster may have gained remote viewing access to the victim’s computer via spyware. The fraudster may go through direct debits and recent expenditure on the victim’s account. The victims bank account names on their online banking app had also been changed to ‘locked’ or ‘closed’, further suggesting remote access.
Requests to move money: A genuine bank or organisation will never contact you out of the blue to ask for your PIN, full password or to move money to another account. Only give out your personal or financial details to use a service that you have given your consent to, that you trust and that you are expecting to be contacted by.
Clicking on links/files: Don’t be tricked into giving a fraudster access to your personal or financial details. Never automatically click on a link in an unexpected email or text.
Personal information: Always question uninvited approaches in case it’s a scam. Instead, contact the company directly using a known email or phone number.
Don’t assume an email or phone call is authentic Just because someone knows your basic details (such as your name and address or even your mother’s maiden name), it doesn’t mean they are genuine. Be mindful of who you trust – criminals may try and trick you into their confidence by telling you that you’ve been a victim of fraud. Criminals often use this to draw you into the conversation, to scare you into acting and revealing security details. Remember, criminals can also make any telephone number appear on your phone handset so even if you recognise it or it seems authentic, do not use it as verification they are genuine.
Don’t be rushed or pressured into making a decision Under no circumstances would a genuine bank or some other trusted organisation force you to make a financial transaction on the spot; they would never ask you to transfer money into another account for fraud reasons. Remember to stop and take time to carefully consider your actions. A genuine bank or some other trusted organisation won’t rush you or mind waiting if you want time to think.
Listen to your instincts If something feels wrong then it is usually right to question it. Criminals may lull you into a false sense of security when you are out and about or rely on your defences being down when you’re in the comfort of your own home. They may appear trustworthy, but they may not be who they claim to be.
Stay in control Have the confidence to refuse unusual requests for personal or financial information. It’s easy to feel embarrassed when faced with unexpected or complex conversations. But it’s okay to stop the discussion if you do not feel in control of it.
If you’ve taken all these steps and still feel uncomfortable or unsure about what you’re being asked, never hesitate to contact your bank or financial service provider on a number you trust, such as the one listed on their website or on the back of your payment card